Rockwell Automation Flex I O Ethernet Ip Adapters vulnerabilities

CVE-2026-0647 [HIGH] CWE-306 CVE-2026-0647: An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server. The vulnerability allows an unauthenticated attacker to change the device's web interface password by sending a crafted HTTP GET request to a specific endpoint, without any prior authentication being required. If exploited, this could lead to unauthoriz

CVE-2026-0646 [HIGH] CWE-401 CVE-2026-0646: A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handl A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handling of CIP protocol requests. This vulnerability can result in the adapter faulting and losing connection to its associated I/O modules, requiring a manual reset to recover.